CVE-2014-0180: Medium severity red hat cloudforms management engine vulnerability
The waitfortask function in app/controllers/applicationcontroller.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0180?
CVE-2014-0180 is classified as a denial of service vulnerability, which can cause severe CPU consumption and an infinite loop.
How does CVE-2014-0180 affect Red Hat CloudForms Management Engine?
CVE-2014-0180 allows remote attackers to exploit the wait_for_task function in Red Hat CloudForms, leading to potential denial of service.
How do I fix CVE-2014-0180?
To remediate CVE-2014-0180, upgrade your Red Hat CloudForms Management Engine to version 5.2.4.2 or later.
Which versions of Red Hat CloudForms are affected by CVE-2014-0180?
CVE-2014-0180 affects Red Hat CloudForms Management Engine versions up to and including 5.2.4.
Can CVE-2014-0180 be exploited remotely?
Yes, CVE-2014-0180 can be exploited by remote attackers to cause a denial of service.